Inverted the where parameters, should work now

Author: Luca Degasperi

src/LucaDegasperi/OAuth2Server/Repositories/FluentSession.php

@@ -182,10 +182,10 @@ public function deleteExpired()
         $expiredSessions = DB::table('oauth_sessions')
                             ->join('oauth_session_access_tokens', 'oauth_session_access_tokens.session_id', '=', 'oauth_sessions.id')
                             ->leftJoin('oauth_session_refresh_tokens', 'oauth_session_refresh_tokens.session_access_token_id', '=', 'oauth_session_access_tokens.id')
-                            ->where('oauth_session_refresh_tokens.refresh_token_expires', '<', $time)
+                            ->where('oauth_session_access_tokens.access_token_expires', '<', $time)
                             ->where(function ($query) use ($time) {
-                                $query->where('oauth_session_access_tokens.access_token_expires', '<', $time)
-                                      ->orWhereRaw('oauth_session_access_tokens.access_token_expires IS NULL');
+                                $query->where('oauth_session_refresh_tokens.refresh_token_expires', '<', $time)
+                                      ->orWhereRaw('oauth_session_refresh_tokens.refresh_token_expires IS NULL');
                             })
                             ->get();
         if (count($expiredSessions) == 0) {
@@ -197,7 +197,7 @@ public function deleteExpired()
                     ->where('id', '=', $session->id)
                     ->delete();
             }
-            
+
             return count($expiredSessions);
         }
     }